<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.24.2">
</HEAD>
<BODY>
On Tue, 2008-12-09 at 17:30 -0500, Karl Wirth wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
Hello,
I have kicked around an idea before with some of you about
iptables...basically being able to have iptables rules that are
associated with the metadata around a particular vm, then apply those to
the host iptables when the vm is spun up or migrated to that host.
</PRE>
</BLOCKQUOTE>
Especially the interesting issues around taking the nf/ip_conntrack data and making sure that state information is correctly migrated.
<BLOCKQUOTE TYPE=CITE>
<PRE>
I emailed with James he thinks the pieces are there but integration work
is needed (as well as the central management). Would someone be willing
to help me understand what major pieces of work would be needed to make
this possible?
Regards,
Karl
--
Libvir-list mailing list
<A HREF="mailto:Libvir-list@redhat.com">Libvir-list@redhat.com</A>
<A HREF="https://www.redhat.com/mailman/listinfo/libvir-list">https://www.redhat.com/mailman/listinfo/libvir-list</A>
</PRE>
</BLOCKQUOTE>
<BR>
</BODY>
</HTML>